CVE-2024-10702

A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2024-10702 code-projects Simple Car Rental System signup.php sql injection

A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2024-10702 code-projects Simple Car Rental System signup.php sql injection

A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

CVE-2024-10702

The CVE-2024-10702 entry affects code-projects Simple Car Rental System 1.0, specifically the /signup.php file. The vulnerability arises from improper handling of the fname parameter, enabling SQL injection that can be exploited remotely. Multiple connected sources corroborate a critical severity...

PT-2024-16477 · Unknown · Simple Car Rental System

Name of the Vulnerable Software and Affected Versions: Simple Car Rental System version 1.0 Description: A critical issue has been found in the Simple Car Rental System, affecting an unknown function of the file /signup.php. The manipulation of the fname argument leads to SQL injection. It is...

WordPress Simple Job Manager plugin <= 1.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Simple Job Manager versions = 1.1...

WordPress Simple Business Manager plugin <= 4.6.7.4 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by CTRL - Chance Patchstack Alliance in WordPress Plugin Simple Business Manager versions = 4.6.7.4...

WordPress Simple Goods plugin <= 0.1.3 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Simple Goods versions = 0.1.3...

WordPress Simple Job Manager Plugin <= 1.1 is vulnerable to SQL Injection

Software Simple Job Manager Type Plugin Vulnerable versions = 1.1 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-51602 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID a7e27e792959 Credits LVT-tholv2k Required privilege Contributor Publish...

WordPress Simple Business Manager Plugin <= 4.6.7.4 is vulnerable to Cross Site Scripting (XSS)

Software Simple Business Manager Type Plugin Vulnerable versions = 4.6.7.4 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51599 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 60b5b7d689c0 Credits CTRL Chance Required privilege...

WordPress Simple Goods Plugin <= 0.1.3 is vulnerable to Cross Site Scripting (XSS)

Software Simple Goods Type Plugin Vulnerable versions = 0.1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51574 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 145a6f76509a Credits SOPROBRO Required privilege Contributor...

WordPress WP Simple Anchors Links plugin <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpanchor Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via wpanchor Shortcode vulnerability discovered by theviper17y in WordPress Plugin WP Simple Anchors Links versions = 1.0.0...

VulnCheck KEV: CVE-2024-1597

pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default mode there is no vulnerability. A placeholder for a numeric value must be immediately preceded by a minus. There must be a second placeholder for a...

VulnCheck KEV: CVE-2023-23897

Cross-Site Request Forgery CSRF vulnerability in Ozette Plugins Simple Mobile URL Redirect plugin = 1.7.2 versions...

WordPress WP Simple Anchors Links Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software WP Simple Anchors Links Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9446 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 5caa7b0b2512 Credits theviper17y Requir...

CVE-2024-49662

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webgensis Simple Load More simple-load-more allows Reflected XSS.This issue affects Simple Load More: from n/a through = 1.0...

CVE-2024-49647

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Carl Alberto Simple Custom Admin simple-custom-admin allows Reflected XSS.This issue affects Simple Custom Admin: from n/a through = 1.2...

CVE-2024-49647 WordPress Simple Custom Admin plugin <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Carl Alberto Simple Custom Admin simple-custom-admin allows Reflected XSS.This issue affects Simple Custom Admin: from n/a through = 1.2...

CVE-2024-49647

CVE-2024-49647 : Reflected XSS in WordPress plugin Simple Custom Admin (

CVE-2024-49662 WordPress Simple Load More plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Webgensis Simple Load More simple-load-more allows Reflected XSS.This issue affects Simple Load More: from n/a through = 1.0...